Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
File:                     VKwN3sMOJORX4W5lB9IZcoMQiT0.cer (raw, json)
Hash identifier:          Aozm6LgJnMDA8E4USy1iyVYoFmW2hWW77JpC0wQWU2Y=
Subject key identifier:   54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195AE60476C458772694DFE412FC14000E3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 19 Mar 2025 12:28:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.149.96.0/22
                          IP: 95.36.80.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ae:60:47:6c:45:87:72:69:4d:fe:41:2f:c1:40:00:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 19 12:28:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=54ac0ddec30e24e457e16e6507d219728310893d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:34:4f:b7:fd:6c:ae:f7:ea:a2:d5:33:3b:
                    19:a0:c7:6b:23:62:c4:f2:45:17:4e:68:aa:32:68:
                    93:31:de:82:e6:a3:45:44:46:75:00:99:ce:73:14:
                    6c:a7:ed:7d:e2:c6:ca:88:d5:29:4f:d4:50:9d:38:
                    c8:3e:b4:59:53:6e:85:67:e1:cb:18:1a:86:a2:c3:
                    3b:3f:fa:f4:36:ed:fe:63:48:ec:3a:6e:cb:0e:5b:
                    dc:49:c1:5e:1c:32:b0:9e:18:56:81:c2:1d:bc:d9:
                    1a:ea:c7:7e:a8:44:0e:f7:b0:de:f6:90:cd:f2:80:
                    51:e4:89:9c:75:80:1b:10:da:b5:23:cf:b2:4f:16:
                    86:10:90:e9:1d:0d:46:0a:e6:fc:4b:29:b1:85:b8:
                    08:4e:b8:fe:54:73:b5:97:3d:28:3a:c6:73:05:9d:
                    9a:48:6d:f2:ed:d4:80:71:98:43:32:42:f6:20:15:
                    60:e1:6c:ba:c2:b7:cd:46:f7:a3:f7:de:76:97:73:
                    3d:a6:a3:01:f1:bd:85:57:9d:d3:58:28:49:7a:16:
                    a9:4a:9f:9c:12:9a:a9:1f:8a:3d:52:41:5e:72:52:
                    47:6d:c9:4c:5a:bc:9d:74:6b:f7:b0:b9:8e:b1:63:
                    02:57:00:bc:d1:ed:f1:6e:7a:ef:96:37:95:2a:2d:
                    9b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.96.0/22
                  95.36.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:fa:33:06:21:5d:b2:cc:e2:d0:14:2f:ec:c9:5a:b6:b5:ff:
         a7:67:75:72:99:38:06:1a:da:83:39:29:1d:e2:ff:7f:7b:8b:
         04:20:68:72:24:4b:ff:45:9d:25:f1:45:c2:a7:eb:aa:21:b4:
         44:a1:3b:51:37:3f:19:cc:19:c4:00:97:b0:ea:8a:7f:8b:24:
         52:75:a2:cd:36:06:bf:e7:e5:61:c4:c5:92:2a:fe:7c:b4:c3:
         b3:0e:0d:1c:04:16:dc:69:f5:45:ae:c0:c4:6c:b1:9b:37:01:
         07:c4:9e:8c:ab:92:db:64:7f:93:79:50:03:94:ee:e6:d3:ce:
         4d:bf:bb:6e:68:7d:b7:de:f8:8a:8e:b3:35:08:b8:af:17:9b:
         2b:91:14:19:27:57:4f:64:32:32:e3:ce:24:36:df:31:9e:c2:
         19:68:52:f8:8d:2b:22:43:95:7d:56:b3:ad:61:34:dc:a5:b6:
         e9:78:e2:41:a7:5c:a3:fe:81:64:01:59:c4:87:eb:63:72:49:
         f0:a0:5f:21:c2:5b:b0:a2:30:f9:87:c4:c6:36:72:7d:eb:21:
         39:cd:02:6a:46:9e:d6:1b:73:a9:4f:e1:52:99:19:d3:47:2f:
         3a:10:db:8f:52:c5:d4:83:24:f1:3e:8b:15:6e:4d:2a:0a:b7:
         a3:89:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----